Thursday, December 14, 2006

New Google gadget to generate safe passwords

I've created a new google gadget, passwdgen for generating safe passwords. Available from here.

It is not a new stuff, I just "gadgetized" the service found here. The javascript code is reused as is.

I also hate passwords. I would like to use the "same" password everywhere, but it is not that safe method. The service generates a password, by mixing a master password and an optional string (best is the site where the password is submitted). You must not give out the master password, and it must be safe enough. You do not have to remember your passwords, because you can regenerate them any time.

Certainly, if your master password gets compromised, all your password may be revealed, but anyhow, it is much safer way that giving the same password everywhere.

Monday, July 03, 2006

"Symbolic link not allowed or link target not accessible..."

Apache 2 refused to serve pages with that claim in the error_log (Suse 10.1). I had tried everything (permissions, ownership, etc.) - nothing worked. My httpd.conf piece looked really perfect:

<Directory "/srv/www/htdocs">
                Options FollowSymlinks
                AllowOverride None
                Order allow,deny
                Allow from all
</Directory>


and no success. Then, I found the line in the httpd.conf:

Include /etc/apache2/default-server.conf

Yes, yes, that include file contained a configuration for the document root, and certainly overwrote my settings. So, if your settings look really good, and the symlink problem still exists - look for such an include.

The problem seems to be obvious - but search Google for it, and you may be surprised...